News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2012

Social networks users under attacks

After attacks at Facebook users, there is now very similar issue which aims at LinkedIn users - "invitations to connect" from prominent businesse…

Bogus Facebook notifications lead to malware

Dancho Danchev shows an example of such a message.

Domain google.ie has been Hijacked! Can this happen in .cz domain too?

Hijack of google.ie domain and information how can domain holders in Czech domain registry protect their domains against the same attack. That is a t…

CSIRT.CZ warns of phishing e-mails to targeted customers CSOB

Tonight were sent a large amount of phishing e-mails to customers of ČSOB bank. CSIRT.CZ and the ČSOB bank are working on eliminating sources of atta…

Phishers Favor Friday for Attacks

If you and your co-workers are looking forward to Friday, you are not alone – phishers are looking forward to it as well.

3G flaw makes any device vulnerable to tracking

A flaw in the way in which 3G-enabled mobile phones and other devices deal with 3G protocol logic means that a third party could track a device at an…

Be aware! Trojan disguised as image delivered via Skype messages

The spamming campaign has surfaced in the last few days and is being propagated via compromised Skype accounts. The offered links don't lead to an…

Humans The weakest link in cyber security

Interesting presentation Humans The weakest link in cyber security from Mark Johnson, chairman of the Risk Management Group, was presented on Cyber T…

TV Spots to Raise Awareness about the Internet

The project aims at educating the public in the Internet, domains, Internet services and related technologies.

Prague, 1 October 2012 - Today Czech Te…

Adobe Code Signing Certificate used to sign malware

On Thursday Adobe came out in a blog post stating an "inappropriate use of an Adobe code signing certificate for Windows". Apparently they discovere…

New bug in the software for Samsung mobile phones

Some Samsung phones with Android can be reset to factory default by clicking on links

Today was notified the new critical Java flaw

This bug affects not only all latest versions of Oracle Java SE.

CZ.NIC Unveils a New Logo and .CZ Brand

This was the first step in a gradual transformation of the visual identity of the entire Association that will take place over the coming months.

Prag…

Malware programmers start using Go

Google's Go programming language has a growing number of users and, according to a report from Symantec, that number now includes some malware writer…

Today will be release a cumulative update for Internet Explorer

On September 21 will be released a cumulative update for Internet Explorer through Windows Update. We recommend install this update immediately.

Next part of series for webserver administrators

In this tutorial you will see the principles on how to secure your phpMyAdmin. PHP has a lot of badly coded scripts which can be abused by malicious …

ICS-CERT Warns of Hard Coded Password in ORing Industrial Control Systems

Attackers can remotely login to a control system used by electric utilities and oil and gas companies via a backdoor to gain administrative access, a…

Microsoft Offers Guidance for Internet Explorer Zero-Day

In response to reports of a Zero-Day vulnerability targeting all versions of Internet Explorer, with the single exception of Internet Explorer 10, Mi…

Be aware of LinkedIn-themed spam

Spoofed LinkedIn emails notifying recipients of messages requiring their attention are not a new occurrence, but recently rent out ones seem to be mo…

Manipulated data causes BIND DNS servers to crash

Some versions of BIND contains a security vulnerability that allows attackers to crash it using specially crafted data records.

Permanent cybersecurity team established for EU institutions

European institutions on Wednesday beefed up cybersecurity efforts by establishing a permanent Computer Emergency Response Team (CERT-EU). CERT-EU…

Everything You Always Wanted to Know About Passwords * But Were Afraid to Ask

First part of series about authentication deal with a world of passwords. In article you can read why avoiding trivial passwords is good idea and how…

Botnet which uses Tor for masking

This novel approach brings all sorts of advantages for zombie PC herders, as G-Data explains.

Windows 8 users are vulnerable because of active exploits for Flash

Microsoft's Windows 8 is vulnerable to attack by exploits that hackers have been aiming at PCs for several weeks, Adobe confirmed Friday.

Facebook Contends With 2 Security Threats

Hackers took advantage of a security flaw to make it appear as if spam was being sent from users’ friends while other online malcontents fooled 90,00…

Czech BIRD software the most popular route server

The EURO-IX report indicates that the Czech software BIRD is the clear favourite among the Internet Exchange Points in this association.

Prague, 3 Sep…

New Attack Uses SSL/TLS Information Leak to Hijack HTTPS Sessions

The researchers plan to present their findings at the Ekoparty conference in Argentina later this month and are not revealing exactly which feature o…

2012 Norton Cybercrime report, a worrying scenario

This article brings summary of information from Norton Cybercrime report 2012.

Be aware of fraudulent alert contains a trojan

Unknown attackers are attempting to persuade email recipients to open attachments that contain a trojan by claiming to be from The Google Accounts Te…

Video from hidden cameras that skimmer thieves placed at ATMs

It is terrifying, how many people still don't use basic security recommendation, as for example covering keyboard while entering their 4-digit code. …

FireEye Advanced Threat Report

The security firm FireEye has released an interesting report named “Advanced Threat Report” related first half of 2012 that provides an overview of…

Firefox, Opera allow crooks to hide an entire phish site in a link

The malicious web pages can be stored in data URIs - uniform resource identifiers, not to be confused with URLs - which stuff the web code into a han…

New Ransom malware infecting computers

Ransomware typically propagates like a typical computer worm, entering a system through, for example, a downloaded file or a vulnerability in a netwo…

The top Internet dangers for kids

As the Internet plays an increasingly prominent role in children’s lives, parents are getting increasingly worried about the ease with which undesira…

New RFC published by WG co-chaired by Ondřej Surý of CZ.NIC

The current RFC (Request for Comments) number 6698 concerns a new technology that enables the verification of certification authorities on the basis …

Critical flaw found in just-patched Java

Security Explorations - the Polish security startup that discovered the Java SE 7 vulnerabilities, which was target of recent web-based exploits, has…

AV-killing worm spreads via Facebook chat and IM clients

A rather industrious piece of malware that - among other things - paves the way for other malware by disabling AV solutions and software update modul…

Oracle's emergency Java patch blocks zero-day exploits

Oracle today issued an emergency update to patch the critical vulnerabilities hackers have been using in increasing numbers to hijack Windows PCs. Yo…

It is time to shutdown Java in browser up to corrected version release

The zero-day in Java that SecurityWeek reported on Monday has gotten worse, as it can be targeted from within the Blackhole Exploit Kit and Metasploi…

Cybercriminals impersonate popular security vendors

According to Websense, the campaign is low-volume, and is currently impersonating Symantec, F-Secure, Verisign and Sophos. The malicious payload (…

Use of popular toolbar can be risky too

Also a very popular and well-known toolbar can be a risk for security. About our experience with toolbar from Alexa you can read in actual blogpost f…

ICANN appoints Czech representative to its prestigious security committee

During his three-year term Ondřej Filip will be in charge of specific tasks related to the reliability and integrity of the root name system, analysi…

Educational video about Internet risks

Nice educational video about viruses, malware, phishing and other risks.

10 Tips for Protecting Mobile Users

Mobile employees, devices and data need protecting. Here are 10 tips to make it happen.

Enisa published report about existing and planned legislation in computer security

Report "Cyber Incident Reporting in the EU" mentioned besides other things also the role of national CSIRT teams in the course of incident handling.

NIST Issues Guidance on Certificate-Based Breaches

NIST's new "Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance" guidelines bulletin, which my com…

New Java Exploit

According to FireEye researcher Atif Mushtaq, the latest version of Java is vulnerable, and presumably earlier versions are as well.

Secure PHP Configuration

Repetition is the mother of wisdom. Several advices for secure PHP configuration.

Contemplation about malware Crisis

Resuming we have a malware that is able to infect four different environments such as Mac, Windows, virtual machines, and Windows Mobile and that rep…

New malware targeting BlackBerry Users

Those users who are targeted receive an email with the subject line “Your BlackBerry ID has been created.” The email encourages users to follow instr…